At Centric, we consider the protection of personal data to be a very important part of our business activities and services.
At Centric IT Solutions GmbH / Centric Cloud Solutions GmbH (Centric), we consider the protection of personal data to be a very important part of our business activities and services. The protection of this data is the basis of our reliability as a supplier and partner. In this case, we understand personal data to mean all information about an identified and/or identifiable natural person.
In this privacy statement, you can read about what personal data Centric and our affiliated companies collect from you. We collect this information because we have an agreement with you or because you are in contact with our services and products.
This statement provides you with information about:
· Why we process personal data
· How long we store personal data
· How you can view and modify the personal data we store
· How we protect your personal data
In our Cookie Statement, you can read how Centric handles cookies.
Our Data Protection Promises
Our data protection promises can be summarized in the following key principles:
• Purpose limitation: Personal data is collected and processed exclusively for clear, legitimate, and predefined purposes. Further processing for purposes other than those originally stated will only take place if permitted by law or if consent has been obtained.
• Legal basis: The processing of personal data is always carried out on a valid legal basis in accordance with Art. 6 GDPR.
• Data minimization: It is ensured that the amount of data processed when processing personal data is limited and necessary for the respective purpose.
• Transparency: Centric provides data subjects (e.g., stakeholders such as customers, interested parties, employees, applicants, seconded persons, and suppliers) with transparent information about the use of their personal data.
• Security: We treat the protection of personal data as a top priority. Appropriate technical and organizational measures are taken to ensure the privacy and security of data to the best of our ability. If we use external service providers to perform our tasks, they are carefully selected and, in accordance with Art. 28 GDPR, are obliged to comply with data protection regulations through appropriate contracts.
What Are Your Rights?
In accordance with the GDPR, you have the following rights when it comes to the use of your personal data:
• Right to information: You have the right to request confirmation from the controller as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain information about the personal data and the information listed in Art. 15 GDPR.
• Right to rectification: You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data in accordance with Art. 16 GDPR.
• Right to erasure (“right to be forgotten”): You have the right to have personal data concerning you erased without delay if one of the reasons listed in Art. 17 GDPR applies.
• Right to restriction of processing: You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing.
• Right to data portability: You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
• Automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• Right to object: You have the right to object at any time to the processing of personal data concerning you pursuant to Art. 21 GDPR. Personal data will then only be processed if compelling legitimate grounds for the processing can be demonstrated that outweigh the interests, rights, and freedoms of the data subject, or if the processing serves to assert, exercise, or defend legal claims.
Point of contact for affected parties
Centric takes the protection of your personal data very seriously. For this reason, we have appointed a data protection officer who will handle all your questions regarding data protection rights. You can contact Centric's data protection officer at privacy@centric.eu.
Right to lodge a complaint with the supervisory authority
Inaccordance with Art. 77 GDPR, you have the right to lodge a complaint with thesupervisory authority if you believe that the processing of your personal datais not lawful.
You canlodge a complaint with the supervisory authority responsible for us, which youcan contact using the following contact details:
StateCommissioner for Data Protection and Freedom of Information NorthRhine-Westphalia
P.O. Box 2004 44
40102Düsseldorf
Tel.: +49211 384240
Fax: +49211 38424999
Email: poststelle@ldi.nrw.de
Information sheet per processing operation
In addition to the privacy policy, Centric selects an information sheet for certain operations. This data sheet specifically addresses the following subtopics relating to processing:
• Why do we use your personal data?
• What types of personal data do we process?
• Who has access to your personal data?
• What is the legal basis for processing yourpersonal data?
• How long do we store your personal data?
• What security measures have been taken?
Information Sheets are available for the following operations:
Marketing and Communications
Recruiting
Webinars
Events
We will add additional information sheets as needed in the near future.
For Centric employees, the application of the General Data Protection Regulation is included in the personnel guidelines.
Filling out form fields
Centric offers the option in various places to receive informational material—such as documents or access to webinar recordings—after entering contact information on forms on the Centric website.
Competitors are excluded from this option. Centric's competitors are providers of human resources software. Centric reserves the right not to provide this information if competitors request it. Anyone who uses private email addresses (e.g., Google, GMX, Web.de,T-Online, Freenet, Gmail, Outlook.com, Yahoo Mail, iCloud Mail, or Proton Mail) when entering contact information is also excluded from this option.
Centric also reserves the right not to provide this information if the information provided by the enquirer in the forms is incomplete, incorrect, or untrue.
Use of Webflow for Hosting and Content Delivery
This website is hosted on servers provided by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA (“Webflow”).
Webflow acts as a data processor on our behalf in accordance with Art. 28 GDPR. The hosting infrastructure is based on a global Content Delivery Network (CDN) that distributes website content across multiple data centers to ensure reliable and secure access worldwide.
When you access our website, certain information — such as your IP address, browser type, access time, and the requested files — is automatically collected and temporarily stored in server log files. These data are technically necessary to display the website and to ensure its stability and security.
Webflow may process this data in the United States. To safeguard the transfer of personal data to a third country, Webflow relies on the Standard Contractual Clauses (SCCs) issued by the European Commission under Art. 46 (2) (c) GDPR, which are included in the Data Processing Addendum (DPA) between Webflow and its customers.
We have no influence over the specific server locations used by Webflow’s CDN and cannot exclude that data will be processed outside the European Union.
However, we do not use any Webflow-integrated analytics or marketing tools. Any collection or processing of personal data for contact, analytics, or marketing purposes occurs exclusively via EU-based services that comply with the GDPR.
Legal basis: The use of Webflow as a hosting provider is based on our legitimate interest under Art. 6 (1) (f) GDPR in ensuring an efficient and secure presentation of our online services.
Updates to our privacy policy
This version of the privacy policy is dated December 8, 2025. Centric continuously updates the statement so that you can always view the latest version.
Contact
Do you have any questions about this privacy policy?
Please contact us at info.de[at]centric.eu
